Method, Apparatus, and System for Processing Dynamic Host Configuration Protocol Message

1. A method for processing a Dynamic Host Configuration Protocol (DHCP) message, comprising: receiving the DHCP message, wherein a source address of the DHCP message is a Cryptographically Generated Address (CGA), and contents of the DHCP message comprise a payload, one or more CGA parameters and a signature of a DHCP message sender for the contents of the DHCP message; verifying the CGA and the signature of the DHCP message sender; and processing the payload of the DHCP message after the verifications of the CGA and the signature succeeded; wherein the signature of the DHCP message sender is carried in a signature option of the DHCP message and the CGA parameters are carried in a CGA parameter option of the DHCP massage, and wherein the CGA parameters are a union of parameters used by the DHCP message sender in a process of generating the CGA.

2. The method of claim 1 , wherein the verifying the CGA and the signature of the DHCP message sender comprises: verifying the CGA by using a public key of the DHCP message sender and the CGA parameters; and verifying the signature of the DHCP message sender by using the public key of the DHCP message sender.

3. The method of claim 1 , further comprising: generating a log when either of the verification of the CGA and the signature of the DHCP message sender fails; and/or generating an alarm when either of the verification of the CGA and the signature of the DHCP message sender fails.

4. The method of claim 1 , wherein the DHCP message further comprises a public key option which carries public key information, wherein the public key information comprises a public key or a public key identifier.

5. A computer program product being stored on a non-transitory computer readable medium and including computer executable instructions for processing a Dynamic Host Configuration Protocol (DHCP) message, the product comprising: a receiving unit, configured to receive the DHCP message, wherein a source address of the DHCP message is a Cryptographically Generated Address (CGA), and contents of the DHCP message comprise a payload, one or more CGA parameters and a signature of the DHCP message sender for the contents of the DHCP message; an address verifying unit, configured to verify the CGA; a signature verifying unit, configured to verify the signature of the DHCP message sender; and a payload processing unit, configured to process the payload of the DHCP message after the verifications of the CGA and the signature of the DHCP message sender succeeded; wherein the signature of the DHCP message sender is carried in a signature option of the DHCP message and the CGA parameters are carried in a CGA parameter option of the DHCP massage, and wherein the CGA parameters are a union of the parameters used by the DHCP message sender in the process for generating the CGA.

6. The computer program product of claim 5 , further comprising one or both of: a log generating unit, configured to generate a log when either of the verification of the CGA and the verification of the signature of the DHCP message sender fails; and an alarming unit, configured to generate an alarm when either of the verification of the CGA and the verification of the signature of the DHCP message sender fails.

7. The computer program product of claim 5 , wherein the address verifying unit is configured to verify the CGA by using a public key of the DHCP message sender and the CGA parameters.

8. The computer program product of claim 5 , wherein the signature verifying unit is configured to verify the signature of the DHCP message sender by using a public key of the DHCP message sender.

9. A Dynamic Host Configuration Protocol (DHCP) message server, comprising: a receiver, configured to receive a DHCP message from a network client, wherein a source address of the DHCP message is a Cryptographically Generated Address (CGA) and contents of the DHCP message comprise a payload, one or more CGA parameters and a signature of the network client for the contents of the DHCP message; a processor, configured to verify the CGA and the signature of the network client and process the payload of the DHCP message after the verifications of the CGA and the signature succeeded, wherein the signature of the DHCP message sender is carried in a signature option of the DHCP message and the CGA parameters are carried in a CGA parameter option of the DHCP massage, and wherein the CGA parameters are a union of the parameters used by the network client in the process for generating the CGA.

10. A network client, comprising: a receiver, configured to receive a Dynamic Host Configuration Protocol (DHCP) message from a DHCP message server, wherein a source address of the DHCP message is a Cryptographically Generated Address (CGA) and contents of the DHCP message comprise a payload, one or more CGA parameters and a signature of the DHCP message server for the contents of the DHCP message; a processor, configured to verify the CGA and the signature of the DHCP message server and process the payload of the DHCP message after the verifications of the CGA and the signature succeeded, wherein the signature of the DHCP message sender is carried in a signature option of the DHCP message and the CGA parameters are carried in a CGA parameter option of the DHCP massage, and wherein the CGA parameters are a union of the parameters used by the DHCP message server in the process for generating the CGA.